tocsin

Debian/nsis: medium 5.5

Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the

Action: Upgrade nsis to 2.50-1 or later.

Affected

introducedfixedlast affected
02.50-1-

Fixed versions

2.50-1

Sources

published · modified · JSON